1c/E2E-TESTME: PASS (E1-E6) — clean-room VM serves a real !testme run end-to-end over the public domain

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

STATUS-1c.md

@@ -75,6 +75,16 @@ See JOURNAL-1c 2026-05-27 W2a entry for full evidence.
 - [ ] C6 — Resource fit + cleanup (cc-nix-test 6→4 GB, throwaway 4 GB, destroyed after; final sizing decided)
 - [ ] C7 — Docs (install.md/secrets.md/architecture.md + main plan refs updated to new model)
 
+## ✅ E2E-TESTME — PASS @2026-05-27 (functional acceptance of D8/clean-room)
+Real `!testme` on the rebuilt-from-git VM (swapped in as cc-nix-test) over the PUBLIC domain:
+**E1** public 200/ssl_verify=0; **E2** bridge→new Drone build #4 (>baseline #3, not manual); **E3**
+app `cust-bdddd9.ci.commoninternet.net` EXTERNAL via gateway → HTTP/2 200, ssl_verify=0, real nginx
+body, `CN=*.ci.commoninternet.net` cert; **E4** build #4 success, log shows real install/upgrade/backup
+(Playwright incl.) all passed, no softening; **E5** clean undeploy (0 residual); **E6** bridge PR
+comment "✅ passed →…/cc-ci/4" + dashboard custom-html/success/#4. Evidence: JOURNAL-1c. Caught+fixed
+the Drone-bot-token reproducibility gap (af46aca) en route. **Adversary independently verifies E1-E6.**
+Remaining: swap-back; re-deploy af46aca to cc-ci (byte-identical at new toplevel `cqym8knj…`).
+
 ## 🔴 SWAP ACTIVE (2026-05-27 ~19:25Z) — public gateway points at the REBUILT VM (reversible)
 **State:** `cc-nix-test` (MagicDNS) → **`100.97.167.73`** (rebuilt `ccci-w5-rebuild`); original cc-ci
 renamed `cc-nix-test-orig` @ `100.90.116.4`, **still running** (swap-back target). Public